Return-Path: <users-return-263305-archive-asf-public=cust-asf.ponee.io@tomcat.apache.org>
X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io
Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io
Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183])
	by cust-asf2.ponee.io (Postfix) with ESMTP id C1F3B200D4C
	for <archive-asf-public-internal@cust-asf2.ponee.io>; Thu, 30 Nov 2017 18:22:12 +0100 (CET)
Received: by cust-asf.ponee.io (Postfix)
	id C0830160C01; Thu, 30 Nov 2017 17:22:12 +0000 (UTC)
Delivered-To: archive-asf-public@cust-asf.ponee.io
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by cust-asf.ponee.io (Postfix) with SMTP id 1225A160BF6
	for <archive-asf-public@cust-asf.ponee.io>; Thu, 30 Nov 2017 18:22:11 +0100 (CET)
Received: (qmail 93466 invoked by uid 500); 30 Nov 2017 17:22:10 -0000
Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:users-help@tomcat.apache.org>
List-Unsubscribe: <mailto:users-unsubscribe@tomcat.apache.org>
List-Post: <mailto:users@tomcat.apache.org>
List-Id: <users.tomcat.apache.org>
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Delivered-To: mailing list users@tomcat.apache.org
Received: (qmail 93453 invoked by uid 99); 30 Nov 2017 17:22:10 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 30 Nov 2017 17:22:10 +0000
Received: from localhost (localhost [127.0.0.1])
	by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id AA5B41A1451
	for <users@tomcat.apache.org>; Thu, 30 Nov 2017 17:22:09 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: 0.999
X-Spam-Level: 
X-Spam-Status: No, score=0.999 tagged_above=-999 required=6.31
	tests=[KAM_LAZY_DOMAIN_SECURITY=1, SPF_HELO_PASS=-0.001]
	autolearn=disabled
Received: from mx1-lw-eu.apache.org ([10.40.0.8])
	by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024)
	with ESMTP id XCCVMTdPR4m1 for <users@tomcat.apache.org>;
	Thu, 30 Nov 2017 17:22:08 +0000 (UTC)
Received: from mailbox.servedge.com (li1281-212.members.linode.com [45.79.182.212])
	by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with ESMTPS id 456A75F6CD
	for <users@tomcat.apache.org>; Thu, 30 Nov 2017 17:22:08 +0000 (UTC)
Received: (qmail 16854 invoked by uid 513); 30 Nov 2017 11:22:01 -0600
Received: from pool-173-66-116-184.washdc.fios.verizon.net (HELO Christophers-iMac.local) (chris@christopherschultz.net@173.66.116.184)
  by mailbox.servedge.com with ECDHE-RSA-AES128-GCM-SHA256 encrypted SMTP; 30 Nov 2017 11:22:01 -0600
Subject: Re: unable to set the "secure="true" flag on server.xml
To: users@tomcat.apache.org
References: <014a01d369fe$42440500$c6cc0f00$@manthan.com>
From: Christopher Schultz <chris@christopherschultz.net>
Message-ID: <7f165d1b-e42d-ef8c-540f-8aedb18f5693@christopherschultz.net>
Date: Thu, 30 Nov 2017 12:22:00 -0500
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0)
 Gecko/20100101 Thunderbird/52.5.0
MIME-Version: 1.0
In-Reply-To: <014a01d369fe$42440500$c6cc0f00$@manthan.com>
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 8bit
archived-at: Thu, 30 Nov 2017 17:22:12 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Naga,

On 11/30/17 12:11 PM, Naga Ramesh wrote:
> I have configured the tomcat8 version & used the AWS ELB, but I
> have set the “secure="true" flag on tomcat8/conf/server.xml file
> end, after that service started and login page came but I am unable
> to login the application and getting the oops session expired error
> message coming.

Please post your <Connector> configuration.

What did you expect secure="true" to actually do?

> Note: we have applied the SSL on AWS ELB end.

So you are terminating TLS at the ELB, right?

> ELB(https) -à tomcat-conenctor-8080

Traffic from ELB -> Tomcat is using HTTPS?

Why encrypt within your own VLAN?

- -chris
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=1f6y
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org